{"version":"0.42.0","built_at":"2026-11-01T08:34:43.408Z","license":"CC BY 4.0 © Mike Reams","canonical":"https://catalog.mikereams.com","capability":{"id":"BC-760.50.60","name":"Workforce AI Use Oversight","level":3,"parent_id":"BC-760.50","l1_id":"BC-760","industry":"cross-industry","macro_id":"MC-70","path":["Cybersecurity","Application & Data Security","Workforce AI Use Oversight"],"description":"Find which public AI tools staff use and what they share with them, and allow, coach, redact or block by policy so company data does not leave in prompts.","aliases":["Shadow AI Control","Shadow AI Discovery"],"in_scope":[],"out_of_scope":[],"csdm_note":null,"status":"active","successor_id":null,"child_ids":[]},"crosswalk":{"realized_by":[],"used_in":[],"patterns":[],"stacks":[],"books":[],"technology":[{"id":"TR-100.80","name":"Shadow AI Discovery & Prompt DLP","domain_id":"TR-100","via":null}],"frameworks":[{"id":"FW-130","name":"NIST Cybersecurity Framework","kind":"Framework","via":"BC-760"}],"principles":[{"id":"PN-120","name":"Never Trust the Network","theme":"Security","via":"BC-760.50"},{"id":"PN-130","name":"Security Is Designed In, Then Verified","theme":"Security","via":"BC-760.50"}],"data_concepts":[],"domain_events":[]},"ancestors":[{"id":"BC-760","name":"Cybersecurity","level":1},{"id":"BC-760.50","name":"Application & Data Security","level":2}],"children":[]}